Static task
static1
Behavioral task
behavioral1
Sample
efa1c5a284bbf091ff43cecb614ab3bcdb002416554c1712f201ff4c67c058a7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
efa1c5a284bbf091ff43cecb614ab3bcdb002416554c1712f201ff4c67c058a7.exe
Resource
win10v2004-20220812-en
General
-
Target
efa1c5a284bbf091ff43cecb614ab3bcdb002416554c1712f201ff4c67c058a7
-
Size
284KB
-
MD5
26b0c803b2df0cd62d75b66cabc04dda
-
SHA1
5b0a741f4c9321f3796d7ce2c0cf7dfc55fa558a
-
SHA256
efa1c5a284bbf091ff43cecb614ab3bcdb002416554c1712f201ff4c67c058a7
-
SHA512
901696635db870c4655badbe89cfb0bb94aacab42d8e635caa85a8619c5c148feca0a7616d90d7b577515724f9feed676117a360d75bd1f35739a31cd95f7450
-
SSDEEP
3072:4eILQmrsZ95PUS8gqpma6LnWP97fYomR2/A/R0FQwCvhFHJ5xem7HCPM7P2Ipb46:CrsZXEnp6Ik9/fwGn7Mm+PEP9VPYKx
Malware Config
Signatures
Files
-
efa1c5a284bbf091ff43cecb614ab3bcdb002416554c1712f201ff4c67c058a7.exe windows x86
7869de20ce718c4fda7d0c74d6bbbfc7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadPriority
TlsSetValue
lstrcmpW
CreateMutexA
IsBadReadPtr
FormatMessageW
GetSystemDefaultUILanguage
GetFileAttributesExW
CreateFileMappingW
GetOverlappedResult
GetShortPathNameW
CreateProcessW
EnumResourceLanguagesW
GetEnvironmentVariableA
GetCommandLineW
FreeEnvironmentStringsA
OpenMutexA
GetCurrentProcess
GetCPInfo
GetProfileStringA
GetDiskFreeSpaceA
HeapFree
GetDriveTypeW
CopyFileA
FlushInstructionCache
MulDiv
OutputDebugStringA
InitializeCriticalSection
GlobalDeleteAtom
GetExitCodeThread
LoadLibraryExW
OutputDebugStringW
GlobalLock
DeleteTimerQueueTimer
FreeResource
SetFileTime
SetFileAttributesW
ReleaseMutex
GetVersionExW
CreateProcessA
GetProcessAffinityMask
SwitchToThread
GetTempPathW
GetProcessHeap
HeapAlloc
GetVolumeInformationW
MultiByteToWideChar
GetProcessTimes
SetThreadLocale
LCMapStringW
LCMapStringA
EnumResourceLanguagesA
WriteFile
GetStringTypeW
GetStringTypeA
LoadLibraryA
HeapReAlloc
GetOEMCP
GetACP
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetLastError
TlsGetValue
SetLastError
TlsAlloc
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
GetProcAddress
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
UnlockFile
WaitForMultipleObjectsEx
VirtualProtect
GetCurrentThreadId
GetFileSizeEx
HeapSetInformation
GetShortPathNameA
WriteConsoleW
FreeLibrary
DeleteFileW
DeviceIoControl
GetModuleHandleA
LoadResource
VirtualAlloc
shell32
ExtractIconA
shlwapi
PathRemoveFileSpecW
SHGetValueW
StrRChrW
comdlg32
GetFileTitleA
version
VerQueryValueA
oleaut32
SafeArrayPutElement
comctl32
_TrackMouseEvent
user32
IsZoomed
TranslateAcceleratorA
GetClientRect
InsertMenuW
GetScrollRange
SetMenuDefaultItem
DefWindowProcA
GetSysColorBrush
ShowOwnedPopups
GetIconInfo
RedrawWindow
GetWindowDC
LockWindowUpdate
UnpackDDElParam
CharNextA
BeginPaint
GetWindowThreadProcessId
GetWindowRect
ModifyMenuA
GetDlgItemInt
CreateCaret
UpdateLayeredWindow
DdeClientTransaction
ShowCaret
SetMenuItemInfoA
SetWindowWord
GetUpdateRect
UnionRect
GetClipboardData
LoadAcceleratorsA
OffsetRect
SetForegroundWindow
SetMenu
DestroyMenu
GetAsyncKeyState
CopyRect
DdeFreeDataHandle
SetKeyboardState
UnhookWindowsHookEx
GetTopWindow
ShowCursor
SetWindowsHookExW
EnableScrollBar
EndDeferWindowPos
OpenIcon
GetKeyboardLayout
PeekMessageA
IsRectEmpty
LoadStringA
CreateWindowExW
LoadAcceleratorsW
VkKeyScanW
GetDlgItem
RegisterClipboardFormatA
SetProcessDefaultLayout
SetWindowsHookExA
wvsprintfW
ValidateRgn
ScrollWindow
DdeFreeStringHandle
WinHelpW
GetCapture
SetClassLongW
DrawTextA
IsWindowUnicode
DrawEdge
SetScrollPos
FindWindowExW
SetMenuItemBitmaps
LoadImageW
GetParent
LoadIconW
WindowFromDC
ole32
WriteClassStm
OleIsRunning
GetHGlobalFromILockBytes
GetClassFile
GetHGlobalFromStream
StgIsStorageFile
advapi32
RegNotifyChangeKeyValue
RegEnumValueW
RegDeleteValueW
CryptCreateHash
RegOpenKeyA
gdi32
RealizePalette
SetMetaFileBitsEx
CreateICW
GetTextMetricsW
EndPath
CreateDIBitmap
SetBrushOrgEx
CreateDCW
Sections
.text Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ